A movable pycache - vulnerability?

Posted Jul 27, 2019 4:15 UTC (Sat) by flussence (guest, #85566)
In reply to: A movable __pycache__ - vulnerability? by 0x01
Parent article: What's coming in Python 3.8

An example to the contrary is daemontools' envdir mechanism, where the permissions for modifying a process's environment are entirely disjoint from what user it runs as. Usually the envdir and its contents are root-owned, but that's just a convention.